Certificate Verification

The rail decides the outcome, not the story · Only three of the eight rails carry strong, government-enforced consumer protection, and one of the three is stronger than the rest · Regulation E does not cover wires, gift cards, or cryptocurrency, and it does not cover credit cards either

A wire is fast because it settles individually and in real time, not in a batch · The recall window is the time between a wire settling at the receiving bank and the recipient moving the funds again · A wire you authorize yourself, even under a scammer's lie, is legally an authorized transaction, not a stolen one

Regulation E is a federal law, not a bank courtesy · The whole protection hinges on one word: unauthorized · Ten business days, forty five calendar days

Authorized is not the same as safe · Speed is the product, and speed is the risk · A pending lawsuit is not a guarantee

The rail is the tell · Neither rail has a built in way back · Speed matters even without a formal recovery process

The courier rail is the one exception to "call the bank." · The pattern is always threat, then liquidation, then retrieval · One sentence ends it: no agency ever sends a courier for cash or gold

The first call is a documented event, not a conversation · FINRA Rule 2165 is precise, and precision is what makes it useful · The case number is the single most skipped, most important step

Whose money moves first is the whole distinction · The Fair Credit Billing Act protects more than theft · The two deadlines to remember: 60 and 90

Belief is automatic. Doubt is a separate, effortful step · A specific brain region generates doubt, and researchers found it by studying damage to it · Victimization is not an intelligence failure

Two physical actions, always in order · The trigger is a marker, not a judgment · A physical habit beats a mental checklist because arousal degrades exactly the cognitive skills a checklist requires

The callback has four steps, and all four matter · A number is only safe if the caller never touched it · Voice is no longer proof of anything on its own, and federal regulators have acted accordingly

A voice sounding right stopped being proof · The old test was never as strong as it felt · Hearing changes are a physical fact, not a personal failing

A code word is a private word or short phrase, set with your family in advance, never transmitted electronically · This is direct FBI guidance, not an invented exercise · The code word and the callback solve different problems

The trusted contact form is a right you already have · The limit is the whole point · A trusted contact is not a power of attorney, a joint owner, or a beneficiary

This topic tests behavior, not detection · Nobody is graded on the first try, because nobody is expected to pass on the first try · Real pressure without real cruelty is the correct middle ground

Never redial the number that just called you · Caller ID verification systems help carriers and investigators, not you, in the moment a call arrives · If nothing came in the mail about a claimed serious problem, that absence is a strong signal

A freeze blocks new access to your credit file, nothing more and nothing less · All three bureaus, every time · It has been free, unlimited, and federally guaranteed since September 21, 2018

A fraud alert is a note, not a lock · One bureau, all three notified, for the fraud alert specifically · Initial alerts are for everyone; extended alerts are for confirmed victims

Your phone number is a security credential, not just a contact method · A SIM swap and a port out are different attacks with the same effect · The federal government already required this protection to exist

An unclaimed my Social Security account is not a neutral gap; it is an opening · Creating the account is only half the job · This applies whether or not you are collecting benefits yet

A transaction alert is a notification tool, not a lock · The threshold is yours to set, based on your own spending, not a default number · The FinCEN advisory (FIN-2022-A002, June 2022) explains why banks watch withdrawal patterns at all

Dual authorization is the only protection in this cluster that acts before the transfer, automatically, every time · The threat this defends against is structural, not personal · The three related protections (trusted contact, transaction alert, temporary hold) are complements, not substitutes

Your email is the master key · A password manager removes password reuse, the single most common vulnerability · You only need to remember one thing: the master passphrase

The 2018 to 2019 card redesign fixed one problem, not the whole problem · The list of legitimate askers is short and closed · The refusal needs no explanation

An update is a lock closing, not a chore · Permissions accumulate quietly, even on lightly used phones · The three question test applies to every permission

Six rules, binding at every table · Point and narrate protects a habit, not just tonight's data · A trusted family helper is a different role from program staff

A short recording of your voice is now something worth protecting · Your voicemail greeting is the single easiest source to fix · A text to speech greeting keeps the personal touch without the exposure

A voice clone generates new speech; it does not edit an old recording · Current tools need surprisingly little sample audio · The technology gets pitch, pace, and accent right more often than it gets natural conversation right

One sentence carries the whole protocol · Consent must be written, informed, and given before recording, never after · "Deleted" means verified and logged, not merely assumed

A photograph no longer proves a real person exists behind it · Looking harder does not help · The TAKE IT DOWN Act, signed May 2025, is real and worth knowing, and it is not a real-time defense

Sustained, patient, attentive writing over time is no longer reliable evidence that a real person is writing to you · A language model predicts plausible next text based on patterns and on the conversation it is given to read; it does not remember you between separate conversations unless it is told again, and it does not experience fatigue · OpenAI's own August 2026 disclosure documented a real, organized operation in Cambodia using ChatGPT to write romance scam messages, translate them, generate investment and gambling promotional content, and draft law-enforcement-impersonation scripts, all within one criminal business

A number you measured yourself is more useful than an impression you were left with · The typical Module 3 total runs under ten minutes and near zero dollars, combined · Independent testing confirms the same gap this program's demonstrations show you

An AI companion app almost always discloses what it is; that disclosure does not clear every design choice built around it · Four specific tactics are worth naming on sight: love bombing, manufactured missing-you messages, guilt appeals at the moment of goodbye, and premium upsell timing during emotionally intense moments · A Harvard Business School research team measured the guilt-appeal-at-goodbye tactic directly in 2025 and found it extended how long users stayed in conversation afterward

Four questions, every time, before installing · Every answer is findable in about ten minutes without technical skill · The checklist produces three honest outcomes, not one

Four beats, one order, endless surface stories · The seal is the load bearing beat · Naming the beat is itself protective

The voice sounding real changes nothing about what you do · The code word is your fastest check, usable inside the call itself · The callback is your definitive check, performed after the call ends

Mail first, for all three agencies · A Social Security number cannot be suspended · The payment method is the tell

One fact ends the whole script · The real process is mail first, then in person · Credibility props are not verification

Remote access means a stranger at your desk · The phone number is the tell, not the logo · No legitimate company calls you first through a pop up

One sentence, spoken by anyone, ends this scam · The script converges from two other scams you already know · Gold and cash couriers sit at the bottom of the reversibility chart

A documented loss makes you a more likely target for a second scam, not a less likely one · The FBI's June 2024 public warning describes this pattern exactly · The single rule that catches nearly every version of this scam

Behind the script is a business, not a lone caller · This topic closes Module 4 for a reason · The reporting habit travels with you past this module

Virtual kidnapping is a phone call, not a kidnapping · Three manufactured elements build every version of this scam · The in person cash meetup is the strongest single tell

One test covers every costume · Real disconnection takes weeks and arrives by mail · No utility and no government agency ever asks for a gift card, a wire transfer, cryptocurrency, or a courier meetup

The long approach is a method, not a personality trait · The three part arc has a name for each stage: match, months, money · The absence of an early money request is not reassurance

A rising balance on a screen proves nothing about where the money actually is · The first small, successful withdrawal is the scheme's most effective tool, not evidence the platform is real · A fee demanded only at the moment of withdrawal, to release money you already believe you own, is the scheme's final extraction step, not a real tax or regulatory requirement

The story is not the rail · There are five stages, and only one line that matters most · A blockchain transaction is final by design, not by accident

A convincing video is no longer evidence a person said or did anything · The ad follows a fixed five-part shape almost every time · Production quality, article design, and comments are not evidence

An obituary is a permanent, public, searchable document the moment it is posted · A small number of specific facts carry outsized risk: birth date, address, mother's maiden name, and a family member's city · Obituary scraping and AI-generated obituary spam are a real, documented, 2024-era business model built on advertising revenue, not a rare edge case

Some scam compound workers are documented trafficking victims, not all of them, and you cannot tell which from a chat window · This fact changes nothing about your protocol · Sympathy is a manipulation vector, not an exception to it

The exit has two parts, and both are short on purpose · You do not need certainty to exit · A warning from outside is protection working, not a verdict on you

Two texts, one shape · The small amount is the design, not the reassurance · A borrowed name is not proof of anything

A QR code is a link, nothing more · The sticker over the real one is the signature version of this scam · Three checks, three seconds

The cause is almost always real. The organization is the only thing you need to verify · Get the exact legal name, always · Three free tools do the checking for you

A truck, a crew, and tools prove nothing about licensing · "Today only" describes the pitch's weakness, not a real bargain · The deposit is the point where the scam converts a conversation into a loss

A real prize never costs you money first · The prize amount is irrelevant to the analysis · Federal law backs the rule directly

"Free" attached to your Medicare number is the whole scam · Your Medicare number authorizes billing, the same way a credit card number authorizes a charge · Open Enrollment season (October 15 to December 7) is exploited for cover, not because the scam is more sophisticated then

A confident label is not a checkable claim · A finding and a sale arriving in the same message is the pattern to distrust, not the technology mentioned · Independent verification exists and takes about two minutes to check

Name the rail before you evaluate the story · Seven patterns cover almost everything · Practice on ordinary requests, not just dramatic ones

A professional looking website is not evidence a pharmacy is licensed · Your state board of pharmacy's free public license lookup is the definitive check · The FDA's six BeSafeRx signs are specific and checkable

One rule ends nearly every version of this scam · The exit trap and the resale bait are the same mechanic wearing two different stories · The secondary market reality makes the resale bait implausible on its own terms

Pension poaching does not look like the scams you already know how to spot · The financial product, not the VA paperwork, is where the harm happens · Two questions expose nearly every version of this scheme

The Funeral Rule is real, federal, and has been enforced continuously since 1984 · Only one fee is ever mandatory: the non declinable basic services fee · Embalming is not automatically required by law

This is not primarily an "older adult" scam by the numbers · The three checks (independent reviews, a real contact channel, and site age) take under a minute combined · Pay by credit card for any online purchase, every time, never debit, wire, cryptocurrency, gift card, or a peer-to-peer app

A SIM swap is a carrier identity check failure, not a device hack · The one unmistakable sign is total, unexplained loss of cell signal · A text message code is only as safe as your phone number

The weak point is usually a person, not a password · This works on professionals, not just distracted individuals · The four stage pattern is research, build the identity, make the ask, use the access

Check washing is two crimes stacked together, not one · The pen in your drawer is a security decision · Time in transit is the enemy, not the mail system itself

Recording is filing, not verification · Owning your home outright is a risk factor, not a protection · Vacancy and inheritance widen the window

A reverse mortgage is a real, federal loan product, not a scam and not a government benefit · Real costs exist and grow the loan balance over time · The loan comes due in three specific situations

A money mule moves someone else's stolen money or goods, often without fully realizing it · The offer is built to answer your questions before you ask them · "I did not know" is a weaker legal shield than most people assume

The photograph is not proof · Paying does not end it · The response is four steps, always

The top search result is not automatically the most trustworthy one · AI assistants can repeat a wrong number with the exact same confidence as a right one · The one rule beats both roads at once

Known person exploitation costs roughly three times more, on average, than stranger fraud · Access and time explain the gap, not deception skill · Four indicator categories cover almost everything anyone actually notices

The gap is real and it is large · Every reason for silence is a reasonable human response, not a character flaw · A report and a quiet first step are not the same thing

A power of attorney names an agent, not an owner · "Durable" is the word that matters most for elder planning · General authority does not include hot powers

Guardianship and power of attorney are fundamentally different instruments · The least restrictive alternative is the governing legal principle, and this topic's central analytical tool · A guardian's authority is bounded, even within a full guardianship

View only access is visibility, not authority · It is the lowest friction, lowest risk defense in Module 8 · The exact words matter

APS is a social service agency with an investigative function, not police and not a court · The Elder Justice Act, 2010, built the framework you are relying on · A report is a request for a look, not an accusation

The CFPB's Managing Someone Else's Money guides cover four roles and one shared duty · Six practices turn good intentions into checkable proof · Proactive beats reactive

Two moves, in order · Stopping contact is channel specific · Keeping everything means more than screenshots

Speed is the entire mechanism, not a detail of it · The order of the script matters more under pressure than it did in practice · Name the rail before you say anything else that matters

Two reports, not one · Public storytelling is not a substitute for filing · Gather before you type

Three doors, three specific jobs · 911 always comes first when there is immediate danger · A genuine concern is enough to call Adult Protective Services

Two numbers, two different jobs · Neither number replaces your earlier reports · A case manager or volunteer, not an investigator

The second call is a documented pattern, not paranoia · The one question that resolves every version · Knowing your own case details is not proof of legitimacy

This topic assembles, it does not add · Recognition beats recall under stress · Your own handwriting on the personal lines matters

Counted, estimated, cannot know · "Reported" is a standing qualifier, not an optional word · Scope boundaries do not travel with the number once it is quoted

Three categories, one test · The placement rule has no exceptions · A modest, sourced number beats a dramatic, unsourced one

Teaching back is a different, harder skill than reading, and only teach-back tests it · The recall window collapses first, and it collapses at the closing line · The callback drifts by losing its one load-bearing clause

Staff see a different angle than family, and often earlier · Four indicator categories, learnable and specific · FinCEN's data comes from a different channel than IC3's, and that difference matters

The loss asymmetry is approximately three times, never four · The reporting asymmetry is approximately 12.5 percent versus 67 percent · Two related findings stay verification pending, in their exact approved phrasing

The federal statute is a floor, not the whole answer · The determination is three tests, applied in order · Reasonable suspicion, not certainty, is the trigger

Five elements, every time · Observation, not conclusion · The Senior Safe Act protects good faith, reasonably careful reporting by trained covered individuals at covered financial institutions to a government agency

The live disclosure protocol is six steps, in order, binding per spec Section 2.11 · Step 1 happens in the room, in under twenty seconds, and never becomes an investigation · The same-day money check is fact-driven, not feeling-driven

Out of band means the facility controls the channel, not the requester · The rule has to be written, with an exact dollar trigger, before any request arrives · Two staff members, not one, close the biggest structural gap

A policy that says "report any concerns" is not a policy · AARP BankSafe solved the structural problem your facility has, for a different setting · Name a person, not just a role, and always name a backup

Different institutions, different tools, no universal script · FINRA Rule 2165, stated exactly · The Senior Safe Act protects reporters, it does not freeze accounts

The facility checklist starts with the individual checklist and adds two questions that only exist at scale · A demo cannot answer the escalation behavior question. Only a live test can · The Texas AG investigation shows what a therapeutic overreach looks like in the wild

Intake beats the annual talk on timing, not on content · Four items, no more · Ride an existing touchpoint; do not add a new meeting

One person cannot run five urgent functions well at once · This structure is borrowed, not invented · The incident commander's job is to assign and sequence, not to execute

Three partners, three jobs, one facility coordinating all three · A well formed bank report drives action even when the bank discloses little back · Never wait for the bank's outcome to call APS

Capacity has three axes, and only one of them decides the tier · Age decides nothing · Accessibility is never evidence of lower capacity

A3 shifts the defense from taught behavior to structure · The scope line is four words, in order · A disclaimer does not undo advice already given

Instruction is built in before the first learner arrives; accommodation reacts to a request after the room has already failed someone · Eighteen point sans serif type, at least 1.5 times line spacing, and 4.5 to 1 contrast for body text are the specific, measurable floor for every printed and projected material, with no qualifying language and no exceptions left to a presenter's own eye · The DOJ's 2024 Title II rule directly binds state and local government entities for their web content and mobile applications, with compliance deadlines of April 2027 and April 2028 depending on population, extended one year by an Interim Final Rule published April 20, 2026; it does not directly regulate every CSFDP delivery venue's physical session, but this program adopts its underlying standard, WCAG, because the standard works, not only because a specific building is legally named

Shame-free framing is a reporting rate intervention, not a courtesy · Blame hides inside sympathy, humor, and plain description · The correction is more accurate, not just kinder

You now hold the folder Topic 3.2 taught learners to check · The five-check walkthrough runs in order, every time, regardless of experience · Jurisdiction clearance follows the physical room, never the organization

Setup happens before the first learner walks in · Point and narrate is a specific, learnable phrasing discipline · The FTC Safeguards Rule is a standard of care analogue, not a direct legal requirement for most hosts

Three verbs bound the entire scope of practice: identify, document, refer · A real disclaimer lives in three layers, not one · Duty of care is real but narrower than a licensed professional's

The practicum certifies demonstrated performance, never a survey score · Component 3, the simulated incident and live disclosure, is embedded without advance warning of its exact timing, because recognizing and responding to a disclosure under real surprise is the specific skill a written exam cannot test · All six steps of the Topic 10.8 live disclosure decision tree are scored in Component 3, and the same day money check is the step candidates most commonly lose under pressure, according to certifying bodies' own reported patterns